Privacy Policy

1. Who We Are

This Privacy Policy describes how Kakus Enterprises Private Limited (GSTIN 29AAJCK3353N1ZY), registered in Karnataka, India and operating the Finoron platform at finoron.com ("we", "us", "Finoron"), collects, uses, and protects your personal information when you use the Platform. Kakus Enterprises Private Limited is the data fiduciary / controller for your personal data under applicable Indian law, including the Digital Personal Data Protection Act, 2023.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password (hashed). We do not collect financial account details, PAN numbers, or Demat account information.

Usage Data: We collect information about how you use the Platform — pages visited, features used, search queries, and watchlist activity — to improve the service.

Device Information: We collect browser type, operating system, and IP address for security and analytics purposes.

3. How We Use Your Information

We use your information to: provide and maintain the Platform; authenticate your identity; send service-related notifications; improve features and user experience; detect and prevent fraud or abuse; comply with legal obligations.

4. Data Storage & Security

Your data is stored on secure servers. We use industry-standard encryption for data in transit (TLS) and at rest. Passwords are hashed using bcrypt. We conduct regular security audits and follow OWASP security guidelines.

5. Data Sharing

We do not sell, trade, or rent your personal information. We share data only with service providers strictly necessary to operate Finoron:

• Razorpay Software Private Limited — our payment processor. When you subscribe, your name, email, and payment details are sent directly to Razorpay's secure checkout. Finoron does not store card numbers, UPI VPAs, or bank credentials. Razorpay's handling is governed by its own Privacy Policy.
• Transactional email providers — for account verification, receipts, and billing notifications.
• Infrastructure providers — hosting, database, and caching providers that store encrypted data on our behalf under data processing agreements.

We may share anonymised, aggregated analytics data that cannot identify individual users. We may disclose information if compelled by law, court order, or to protect our rights and user safety.

6. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand usage patterns. You can disable non-essential cookies in your browser settings.

7. Your Rights

You have the right to: access your personal data; correct inaccurate data; request deletion of your account and data; export your data (watchlists, portfolios); withdraw consent for non-essential data processing. To exercise any of these rights, write to privacy@finoron.com.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove personal data within 30 days. Anonymised analytics data may be retained indefinitely. Transaction and payment logs are retained for at least 7 years as required under Indian tax and accounting laws.

9. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect information from minors. If we discover we have collected data from a minor, we will delete it promptly.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, any complaints or grievances regarding the processing of your personal data may be addressed to our Grievance Officer at privacy@finoron.com. We will acknowledge your complaint within 7 days and resolve it within 30 days of receipt.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Platform.

Contact

Privacy concerns? Reach us at Contact Us or email privacy@finoron.com.